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CLAIMS 

What is claimed is: 

1 1. In a fault tolerant system having a primary device and at least one 

2 redundant device, and further having a remote controller for monitoring the status 

3 of the devices and providing a control signal to switch from the primary device to 

4 the redundant device upon detection of a failure in the primary device, a method 

5 of determining validity of the control signal comprising: 

6 continually sending a first signal having a predetermined varying 

7 characteristic to at least the primary device from the remote controller; and 
q 8 sending a second signal having a different varying characteristic to at least 

9 the primary device from the remote controller upon detection of a failure of the 

CH 10 primary device. 
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J p j 1 2. The method of claim 1 wherein the varying characteristic comprises 

5 2 a signal frequency. 
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[y 1 3. The method of claim 2 wherein the signal frequency is a continuous 

;f t 2 wave frequency. 
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1 4. The method of claim 2 wherein the signal frequency is a selected 

2 number of signals per unit of time. 

1 5. The method of claim 1 wherein the at least one device includes a 

2 receiver responsive Jp^ttt^to the first signal for acknowledging receipt thereof to 

3 the remote controller. 
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